{"id":"EUVD-2025-205063","revision":"6be7bb310cb04c8bac6dd0a1b6d00571","records":[{"revision":"6be7bb310cb04c8bac6dd0a1b6d00571","observedAt":"2026-11-03T00:00:10.492+00:00","statement":{"source":"euvd","id":"EUVD-2025-205063","aliases":["CVE-2025-13767","GHSA-fmqf-pmcm-8cx9"],"title":"Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with…","description":"Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3,"severity":null}],"references":["https://mattermost.com/security-updates"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205063","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 24, 2025, 8:01:27 AM","dateUpdated":"Dec 24, 2025, 4:36:22 PM"},"relatedAdvisories":[{"id":"WID-SEC-W-2025-2712","title":"Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen","vulnerabilityIds":["CVE-2025-13767"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-205063","identifiers":["EUVD-2025-205063","CVE-2025-13767","GHSA-fmqf-pmcm-8cx9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}